Setting the port security mode – H3C Technologies H3C S12500-X Series Switches User Manual

Page 137

Advertising
background image

125

Key code:

30819F300D06092A864886F70D010101050003818D0030818902818100DA3B90F59237347B

8D41B58F8143512880139EC9111BFD31EB84B6B7C7A1470027AC8F04A827B30C2CAF79242E

45FDFF51A9C7E917DB818D54CB7AEF538AB261557524A7441D288EC54A5D31EFAE4F681257

6D7796490AF87A8C78F4A7E31F0793D8BA06FB95D54EBB9F94EB1F2D561BF66EA27DFD4788

CB47440AF6BB25ACA50203010001

230B

Example for importing a public key from a public key file

457B

Network requirements

In

832H

Figure 39

, Device B authenticates Device A through a digital signature. Before configuring

authentication parameters on Device B, configure the public key of Device A on Device B.

Configure Device B to use the asymmetric key algorithm of RSA to authenticate Device A.

Import the host public key of Device A from the public key file to Device B.

Figure 39 Network diagram

458B

Configuration procedure

1.

Configure Device A:
# Create local RSA key pairs with default names on Device A, and use the default modulus length
1024 bits.

<DeviceA> system-view

[DeviceA] public-key local create rsa

The range of public key modulus is (512 ~ 2048).

If the key modulus is greater than 512, it will take a few minutes.

Press CTRL+C to abort.

Input the modulus length [default = 1024]:

Generating Keys...

.................++++++

......................................++++++

.....++++++++

..............++++++++

Create the key pair successfully.

# Display all local RSA public keys.

[DeviceA] display public-key local rsa public

=============================================

Key name: hostkey (default)

Key type: RSA

Time when key pair created: 16:48:31 2011/05/12

Key code:

30819F300D06092A864886F70D010101050003818D0030818902818100DA3B90F59237347B

8D41B58F8143512880139EC9111BFD31EB84B6B7C7A1470027AC8F04A827B30C2CAF79242E

45FDFF51A9C7E917DB818D54CB7AEF538AB261557524A7441D288EC54A5D31EFAE4F681257

Advertising